This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json) Hash identifier: ZhGpn31YnxBcYEhaOC1NDfMJwG1tT4YT8Wyths/gWaU= Subject key identifier: 3E:02:DA:9A:AD:BE:0A:60:D2:4D:3B:AD:69:52:A5:B2:6A:BA:19:73 Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Certificate serial: 019AEED13C58BFE640EB79AF986143E8D682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft Manifest number: 0D66 Signing time: Fri 05 Dec 2025 14:01:21 +0000 Manifest this update: Fri 05 Dec 2025 14:01:21 +0000 Manifest next update: Sat 06 Dec 2025 14:01:21 +0000 Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: ZNDOj2xAVlyJ/lMSa7YQh394KrR4q/rkZv8wur0p0/0=) 2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:d1:3c:58:bf:e6:40:eb:79:af:98:61:43:e8:d6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Validity Not Before: Dec 5 14:01:21 2025 GMT Not After : Dec 6 14:01:21 2025 GMT Subject: CN=3e02da9aadbe0a60d24d3bad6952a5b26aba1973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:5b:9a:2f:dc:ba:c1:77:7e:cf:37:13:2a: 8d:79:8d:12:db:18:c3:e7:5d:c3:11:a5:4e:13:7f: d1:a4:59:aa:95:c4:2d:ed:34:00:49:0f:5b:61:c0: 02:ac:bc:9b:9f:9e:d5:3b:55:4b:86:19:74:2e:62: 7e:0a:51:fb:70:23:b0:72:51:61:95:73:02:90:77: 95:5b:3b:15:23:5a:c2:18:a5:29:83:48:29:e5:a6: 82:ec:37:3f:2a:67:5f:7c:aa:9d:7f:59:22:67:28: 13:4b:fd:63:1b:40:ff:e4:3b:02:35:58:74:ca:a6: 8c:31:e7:bd:0e:04:39:88:a3:10:b7:7c:36:6e:66: 0a:c8:1e:58:b9:c1:49:d2:dd:f3:73:4b:2f:9e:1f: da:66:b1:a4:45:d2:d8:d8:ef:1f:c9:fe:c6:6a:04: c3:f7:f0:07:fc:a9:2f:c3:f9:ee:7a:f4:f2:db:4a: 47:6e:b2:de:f4:53:6a:fa:85:d7:a2:88:5c:48:4b: 88:e7:43:cd:a7:aa:d6:a9:b8:62:73:1e:ca:1a:35: 02:04:9e:c9:60:98:8c:b4:e6:6f:de:46:94:e2:d2: 12:55:5c:66:9e:72:76:18:df:cd:5b:b6:17:8e:4e: 82:dc:54:50:e3:ff:05:a4:80:87:e1:12:fa:f2:09: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:DA:9A:AD:BE:0A:60:D2:4D:3B:AD:69:52:A5:B2:6A:BA:19:73 X509v3 Authority Key Identifier: keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:89:44:b6:eb:74:fe:73:be:26:6b:69:8e:89:09:a8:dc:09: e1:02:b5:bd:72:f7:73:73:82:00:b7:72:4b:8c:93:b5:2c:e0: d6:34:16:83:12:66:7d:94:1a:da:18:eb:dd:4d:1e:be:22:96: 17:da:fd:93:3b:b9:12:b3:e9:80:73:92:c3:ab:c6:ef:e0:77: 0a:21:d4:4e:9c:a0:ef:3c:51:67:bf:92:79:e5:de:85:e8:61: 14:13:88:db:8d:29:d2:7f:97:a6:d8:85:4d:2e:9c:64:c7:b2: 0e:df:4c:57:a6:d0:60:91:98:94:3e:8f:1c:91:ec:f3:f5:22: fe:3c:e2:e9:f7:25:91:f5:36:75:51:5b:4e:ff:cc:c5:28:eb: 88:f5:88:df:c4:87:e9:e8:4b:df:6e:75:22:90:c7:fa:fe:8f: ec:ae:8d:4c:ea:2f:39:3d:2c:64:59:09:7a:9b:59:e9:21:1f: a9:27:02:04:96:2f:ba:0f:6e:b2:56:c8:3d:44:b4:76:05:17: 7c:12:39:82:7e:8c:bb:47:3f:a7:53:77:ab:31:60:76:a4:70: 22:30:b8:6c:2c:03:9d:54:cc:64:7a:e2:7d:ce:02:66:c1:ba: c9:a8:6a:66:5d:d0:45:a4:c1:f1:02:af:3f:3c:07:18:6e:f4: 69:c7:e8:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZru0TxYv+ZA63mvmGFD6NaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3 YzkxMDEwHhcNMjUxMjA1MTQwMTIxWhcNMjUxMjA2MTQwMTIxWjAzMTEwLwYDVQQD EygzZTAyZGE5YWFkYmUwYTYwZDI0ZDNiYWQ2OTUyYTViMjZhYmExOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUpbmi/cusF3fs83EyqNeY0S2xjD 513DEaVOE3/RpFmqlcQt7TQASQ9bYcACrLybn57VO1VLhhl0LmJ+ClH7cCOwclFh lXMCkHeVWzsVI1rCGKUpg0gp5aaC7Dc/KmdffKqdf1kiZygTS/1jG0D/5DsCNVh0 yqaMMee9DgQ5iKMQt3w2bmYKyB5YucFJ0t3zc0svnh/aZrGkRdLY2O8fyf7GagTD 9/AH/Kkvw/nuevTy20pHbrLe9FNq+oXXoohcSEuI50PNp6rWqbhicx7KGjUCBJ7J YJiMtOZv3kaU4tISVVxmnnJ2GN/NW7YXjk6C3FRQ4/8FpICH4RL68gk2fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4C2pqtvgpg0k07rWlSpbJquhlzMB8GA1UdIwQY MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4lEtut0 /nO+JmtpjokJqNwJ4QK1vXL3c3OCALdyS4yTtSzg1jQWgxJmfZQa2hjr3U0eviKW F9r9kzu5ErPpgHOSw6vG7+B3CiHUTpyg7zxRZ7+SeeXehehhFBOI240p0n+XptiF TS6cZMeyDt9MV6bQYJGYlD6PHJHs8/Ui/jzi6fclkfU2dVFbTv/MxSjriPWI38SH 6ehL3251IpDH+v6P7K6NTOovOT0sZFkJeptZ6SEfqScCBJYvug9uslbIPUS0dgUX fBI5gn6Mu0c/p1N3qzFgdqRwIjC4bCwDnVTMZHrifc4CZsG6yahqZl3QRaTB8QKv PzwHGG70acfoPQ== -----END CERTIFICATE-----Generated at Fri Dec 5 19:27:44 2025 by rpki-client